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(57) ABSTRACT 

An image capturing system and method for automatically 
watermarking a plurality of recorded camera and image 
parameters such as the location (latitude, longitude and 
altitude), orientation of the principal axis of the camera, 
whether the camera is in landscape mode or portrait mode, 
camera velocity, photographer information, time and date, 
zoom factor, shutter speed, flash on/off, autofocus distance, 
lightmeter reading, focal length and aperture into every 
captured image. This watermarked data can be subsequently 
extracted and compared with the originally recorded data so 
as to verify the authenticity of a corresponding image. Since 
the critical data is invisibly watermarked into the image, it 
is difficult to modify the image without affecting the water- 
marked data. 







Snarf Card 









flux Cc-i*. 




C 



lUcrUrtharKer 



QO 



10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16, 2003 Sheet 1 of 7 US 2003/0011684 Al 



V 



4> 




10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16,2003 Sheet 2 of 7 US 2003/0011684 Al 




tl 



10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16, 2003 Sheet 3 of 7 US 2003/0011684 Al 





r. 




fits* ce*( 

















Pert* 


meters 









3oc 



■V» (?r \J*r,'('<cf 



(ero/ntitri Wfr* 
ItCerettJ fart**™* 



JOS' 



~ ~ "X 








fit f»«"-> 



3^ a 



10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16, 2003 Sheet 4 of 7 US 2003/0011684 Al 




401 

START )J 



BaSEDON verification key 



402 



UITTIALIZE PIXEL INDICES V 



403 



EXn^CTWXTEW^K<VALUE 
FROM PIXEL VALUE 

EW(U) cWX<SS(LJ)) 



404 



UPDATE PIXEL INDICES LJ 



] 




10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16, 2003 Sheet 5 of 7 US 2003/0011684 Al 




1001 INPUT 
PIXEL 



l^ttr] [lutg] |"uir B I 



^ 



1002 
TABLES 



XOR \ 











■1003 



EW(tJ) 



1005 



1004 



10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16, 2003 Sheet 6 of 7 US 2003/0011684 Al 



511 



SOURCE 
(MaG£ 



STAMPING 
INFORMATION 



510 



J 



random number 
generator 




^-5 



VERIFICATION' 
KEY AND 
EXIRaCDON 
FUNCTION 
GENERATOR 



502 



COMPUTATION OF 
WATERMARK VALUES 



1 



COMPARISON OF 
WATERMARK VALUES 

COMPUTED WITH , , 



KJE-COMPUTaTIOK 
OF WATERMARK 
VALUES 



504 



y4 



sot 



ALTERATION OF 
MODIFIED PDCEL 
VALUES TO 
INTRODUCE 
ERRORS 



ERROR 
DIFFUSION 



^506 



'505 



VERIFICATION 
KEY 



512 



r 



5U 



STAMPED 
IMAGE 



K 3 s 



10/17/2003, EAST Version: 1.04.0000 



Patent Application Publication Jan. 16, 2003 Sheet 7 of 7 US 2003/0011684 Al 



START 




601 



COMPUTE VERIFICATION 1 KBV V -- 60 2 



COMPUTE WATERMAlUC 
EXTRACTION FUNCTION WXC) 



INITIALIZE PIXEL INDICES U 



PROCESSING TO MODIFY AND 
ALTER PIXEL VALUE AT ^ ts „_ 

wmIs iU&D BRWRS 




10/17/2003, EAST Version: 1.04.0000 



US 2003/0011684 Al 



1 



Jan. 16, 2003 



IMAGE CAPTURING SYSTEM AND METHOD 

FOR AUTOMATICALLY WATERMARKING 
RECORDED PARAMETERS FOR PROVIDING 
DIGITAL IMAGE VERIFICATION 

BACKGROUND OF THE INVENTION 
[0001] 1. Technical Field of the Invention 

[0002] This invention generally relates to a system and 
methods for digital image verification and, more particu- 
larly, to an image capturing system and methods for auto- 
matically recording and watermarking a plurality of camera 
and image parameters with a digital image (still and video) 
for verifying the authenticity of the digital images. 

[0003] 2. Description of the Related Art 

[0004] It is often necessary to determine the conditions 
and circumstances (such as time, date, and location) in 
connection with the capturing of an image. For instance, 
such information can be of immense value to insurance 
agencies (e.g., real-estate, auto, and fire), hospitals, news 
agencies and crime investigating agencies, for confirming 
the details surrounding an accident so as to assist in the 
investigation of the accident and preparing the necessary 
accident reports. Moreover, this information would also be 
useful for image search algorithms that are based on such 
information. Therefore, an image capturing device which 
can automatically record a plurality of parameters with each 
captured image, such as names of geographic locations, 
altitude, longitude, time, date, photographer identification, 
as well as image data such as light intensity, shutter speed 
and flash status, would be very useful to such agencies. 

[0005] Furthermore, an image capturing system which 
could automatically watermark (i.e., hide) the plurality of 
recorded parameters into each image would be useful for 
verifying the authenticity of digital pictures, as well as 
verifying and confirming the circumstances and conditions 
surrounding the capturing of the digital image. In general, 
the ability to prove the authenticity of digital images is a 
burdensome task because there are various commercially 
available software applications which allow users to 
manipulate and modify digital images. Therefore, by invis- 
ibly watermarking parameters associated with a digital 
image within the image, the authenticity of the digital image 
may subsequently be verified by extracting the watermarked 
parameters and then comparing the extracted parameters 
with the initially recorded parameters to determine whether 
they are similar. 

[0006] There are commercially available film cameras 
which are capable of recording the time and date on each 
photographic image. These conventional film cameras, how- 
ever, do not record additional camera parameters such as 
location (e.g., altitude and longitude) in an electronically 
accessible form. Moreover, these traditional film cameras 
allow a user to set any desired date and time to be recorded 
with each image, which limits the use of such recorded 
information for purposes of authenticating digital images. 

[0007] There are digital cameras that are commercially 
available which can capture and record the time and date 
with each image. But like the conventional film cameras, the 
user can set any desired time and date to be recorded with 
each image. Moreover, the time and date information are 
often stored in the header line for the image file. Some 



digital cameras store these camera parameters in a separate 
file. The separate file may be encrypted and transmitted 
along with the image file. The disadvantage with this 
approach, however, is that the user may create his own 
camera parameters for an image and then encrypt it and 
present it as the secure data for the image. Thus, separating 
the captured image from the encrypted parameter file does 
not afford a solution to potential tampering of such recorded 
information. 

[0008] In addition, there are commercially available cam- 
eras which allow other parameters (in addition to time and 
date) to be recorded with each image. These cameras, 
however, do not provide means for detecting if such param- 
eters have been modified or if the images have, otherwise, 
been tampered with. For instance, U.S. Pat. No. 4,574,319 to 
M. Konishi entitled, "Electronic Camera Having Non-Image 
Data Recorder," teaches the association of a magnetic 
recording area with each image for conventional film cam- 
eras. Camera parameters such as shutter speed, aperture 
value, frame number, location of image, and the name of the 
photographer for a given image can be stored in the asso- 
ciated magnetic recording area. This invention, however, 
assumes a trusted environment and does not teach a method 
for proving the authenticity of such recorded camera param- 
eters. 

[0009] Next, U.S. Pat. No. 5,506,644 to Suzuki et al. 
entitled, "Camera", teaches the connection of a Global 
Positioning System (GPS) receiver to the camera so as to 
record the location at which the image was taken. Again, this 
invention does not deal with proving the authenticity of 
recorded location parameters and assumes a trusted envi- 
ronment. 

[0010] Furthermore, U.S. Pat. No. 5,247,356 to J. Ciampa 
entitled, "Method and Apparatus for Mapping and Measur- 
ing Land", teaches the association of geographical location 
information with each picture and stores the information in 
unused portions of an analog image, such as the vertical 
blanking interval, or in the border of a digital image. The 
disadvantage to this is that, by storing data in such obvious 
places, a hacker can easily detect and modify such param- 
eters. 

[0011] On the other hand, U.S. Pat. No. 5,499,294 to G. 
Friedman, entitled, "Digital Camera with Apparatus for 
Authentication of Images Produced From an Image File" 
teaches a method for verifying the authenticity of a digital 
image. This invention utilizes the concept of public and 
private keys. Each camera is assigned a private key. Initially, 
a hash code based on the contents of the image is computed. 
The hash code is then used to generate a digital signature 
using the private key. The digital signature is then decrypted 
using a public key to obtain the hash code which is then 
compared with the original hash code of the image to 
determine if any alteration has occurred. In addition, the 
invention teaches that additional camera parameters such as 
location, orientation, shutter speed, f-stop, etc., may be 
recorded in the border of the image and be used to compute 
the hash function. One disadvantage with this approach is 
that the image file and the digital signature are separate 
entities. Therefore, two entities are needed every time an 
image has to be authenticated. Further the two entities may 
become disassociated during transmission, thus, making it 
difficult to track them down. 
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[0012] Based on the above prior art, there are no com- 
mercially available image capturing devices which afford 
automatic recording and watermarking of a plurality of 
camera and image parameters with each captured digital 
image. By watermarking (i.e. hiding) the recorded param- 
eters throughout each captured image in a non-obvious 
manner (in addition to, or in lieu of, storing the parameters 
in an image header or in a separate file), it is difficult to 
detect and tamper with the embedded data. Accordingly, the 
watermarked parameters may be recovered and checked 
against the parameters which were recorded (e.g., electroni- 
cally or manually) at the time the image was taken so as to 
verify the authentic of the image as well as the recorded 
parameters. 

SUMMARY OF THE INVENTION 
[0013] The present invention is directed to an image 
capturing system and method for automatically watermark- 
ing a plurality of recorded parameters such as the time, data, 
location (e.g., latitude, longitude and altitude) of the camera 
into each captured image. In a preferred embodiment, the 
watermark (or "stamping information") consists of a stream 
of binary data (i.e., bits) representing one or more of the 
plurality of recorded parameters. During an image stamping 
process, the stamping information is invisibly embedded 
(i.e., stamped) into a source image in accordance with a 
defined mapping process to produce a stamped image. The 
mapping process associated with each image is identified by 
a corresponding decoding "key" (or "verification key"). The 
stamping process distributes the stamping information in the 
entire image without generating any visible traces of the 
stamping information or any visual artifacts in the image, 
thereby making it difficult to modify the image without 
affecting the watermarked data. In other words, the stamping 
information is perceptually invisible and any modification 
on the image alters the stamping information, and an 
attacker cannot restore the altered invisible mark stamped 
onto the image. 

[0014] During an image verification process, the stamping 
information (i.e., the watermarked parameters) may be 
decoded (i.e., extracted) with the corresponding verification 
key. The extracted information (i.e., camera parameters) is 
then compared with the camera parameters recorded at the 
time the corresponding digital image was generated. If the 
extracted parameters match the originally recorded param- 
eters, the corresponding image is determined to have not 
been altered since the time the image was stamped. 

[0015] In an alternate embodiment where the photogra- 
pher can be trusted, the recorded camera parameters asso- 
ciated with the image may be stored in a separate memory 
block associated with the generated image (e.g., in an image 
header) or directly transmitted to a central server. 

[0016] In one aspect of the present invention, an image 
capturing system for automaticaQy recording and water- 
marking a plurality of parameters in a captured image 
comprises: 

[0017] a central processing unit for controlling a 
plurality of functions and operations of the system; 

[0018] image capture means, operative ly connected 
to the central processing unit, for generating a digital 
image of an observed image frame and for generat- 
ing a plurality of image data associated with the 
generation of the image; 



[0019] wireless communication means, operatively 
connected to the central processing unit, for receiv- 
ing data from objects in the observed image frame 
when the image is generated; 

[0020] geographic location determining means, 
operatively connected to the central processing unit, 
for determining geographic coordinates of the sys- 
tem when the digital image is generated; 

[0021] means for determining a time and a date when 
the image is generated; 

[0022] information receiving means, operatively 
coupled to the central processing unit, for receiving 
data associated with a user of the system when the 
digital image is generated; 

[0023] image processing means for receiving the 
plurality of parameters and recording the plurality of 
parameters with the generated digital image, the 
plurality of parameters including the plurality of 
image data, the object data, the time data, the date 
data, the location data, and the user data; and 

[0024] means, operatively coupled to the image pro- 
cessing means, for watermarking the plurality of 
parameters into said image. 

[0025] These and other objects, features and advantages of 
the present invention will become apparent from the fol- 
lowing detailed description of illustrative embodiments, 
which is to be read in connection with the accompanying 
drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0026] FIG. 1. is a block diagram of an image capturing 
system for automatically recording and watermarking a 
plurality of camera and image parameters in accordance 
with an embodiment of the present invention; 

[0027] FIG. 2 is a block diagram of a preferred architec- 
ture for a watermarker processor of the image capturing 
system of FIG. 1 in accordance with the present invention; 

[0028] FIG. 3 is a flow diagram of a method for image 
verification in accordance with the present invention; 

[0029] FIGS. 4a and 4b is a flow diagram illustrating an 
exemplary method for extracting embedded stamping infor- 
mation from a stamped image during an image verification 
process, and a block diagram illustrating extraction of a 
watermark value from an input image pixel, respectively, in 
accordance with the present invention; 

[0030] FIG. 5 is a block diagram of functional compo- 
nents of the image stamping module of FIG. 2; and 

[0031] FIG. 6 is a flow diagram of an exemplary image 
stamping method in accordance with the present invention. 

DESCRIPTION OF PREFERRED 
EMBODIMENTS 

[0032] R&ferrmg-to^FlG^l^Blc^giag ra^^fWm iagg 
capturing j>ys^_for^tomaticaUy^ 
::: mallang~TlfluYaTh with 
eactf^fiotogra^gg nd/or v ideo (collec^ely^efe^r^ttjp as 
^gilalnrrra'ge M )~in^ccordance -with'an^embodiment of the 
p r^sent-inyenUoB-is^how^Pfe fe rab ly,~ t he - syst e nFl OO^oP 
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vjgg g imagesj-having-convcnlionalrconipoDenlSrSuch^a^a 

php^raphk;4eiis-andshutter^ 
,kg^aadjxm#eitingJight^^ 
.into^suiuble^electfic-signate^ 

(^hidicarecDGbshowQ)^It-is4o=be=uaderslQpd,^however^by 
one-oLordiBary"§lffll^-the=art^that=tbe=system=GtnG,4-i9 
not limited4o-a;camerapbutmay^be^embedded=in ; other ; OPU 
b^^^^stems-suc h-as-a- portable^computctbot^aay^raA 
^oWic^ha ying .the^ mp^ the 
system-100ras-weH c as-othefcconventionato^ 
D ents^such_as_a,phpto g^hic3lens^or-capfaTiDg=images. 

[0033] The^digital camera lOO^ of^FlGT^lf^iDcIua^a 
centn ^iocess iag^&(GE^ 

tions of the camera 100 via, e.g., programs stored in a 
memory 108 and executed by the CPU 102. In particular, the 
CPU 102 includes a speech processor module 104 for 
processing voice data or voice commands which are input 
into the camera 100 through a microphone 138. An analog 
to digital (A/D) converter 136 converts analog acoustic 
signals from the microphone 138 into digital signals for 
processing by the speech processor module 104. The CPU 
102 also includes an image/parameter processor module 
106, for recording a plurality of parameters (to be further 
explained below) onto digital images and for compressing 
the digital images using known data (image) compression 
techniques such as the Joint Photographic Expert Group 
(JPEG) coding standard. Although the illustrative embodi- 
ment herein shows the CPU 102 comprising the speech 
processor module 104 and the image/parameter processor 
module 106, it is to be understood that such modules may 
also be implemented as separate modules each having a 
processor, associated memory and stored programs for per- 
forming such functions. 

[0034] The camera 100 includes a plurality of components 
which are used for generating the parameters which can be 
recorded and watermarked onto the digital images and 
subsequently utilized (discussed in detail below) for verify- 
ing the authenticity of the image. For instance, the camera 
100 includes conventional camera electronic circuitry 128 
for controlling and measuring various parameters such as 
lens focal length, auto focus distance, shutter speed, expo- 
sure duration, aperture setting, frame number, image quality 
(e.g., high, medium or low), flash status (e.g., on or off) and 
light meter readings. 

[0035] In addition, a flux gate magnetometer (FGM) 130 
of any conventional type is operatively connected to the 
CPU 102 for measuring the orientation of the principal axis 
of the camera 100 (in 3 dimensions). For instance, the FGM 
130 provides an "image mode" parameter to indicate 
whether the camera 100 is in a portrait mode (vertical 
dimension is larger) or landscape mode (horizontal dimen- 
sion is larger) mode. Alternatively, the camera 100 may 
include either a conventional gyroscope or compass (not 
shown) in lieu of the FGM 130 for determining the orien- 
tation of the camera 100. Also included is a GPS receiver 
114, operatively connected between an RF port 116 (e.g., an 
antenna) and the CPU 102, for recording the geographic 
position (e.g., latitude, longitude, and altitude) of the camera 
100, as well as Universal Time Coordinated (UTQ time and 
date and local time and date when an image is taken. It is to 
be appreciated that additional data such as such as the fix 
quality (i.e., the ability of the receiver to pick up satellite 



signals) and the number of satellites in view may be obtained 
and recorded via the GPS receiver 114. Such information 
may be used, e.g., to determine if the image was taken 
indoors or under trees or on a cloudy day. An accelerometer 
132 is provided for computing the displacement of the 
camera 100 from its last determined position when satellite 
coverage is poor or while the camera 100 is indoors (i.e., the 
GPS signal is weak or undetectable) so that the position of 
the camera 100 may be accurately recorded. 

[0036] The camera 100 further includes a smartcard 
reader/writer 110 (as is known in the art) for reading and 
writing information to and from various cards, e.g., mag- 
netic cards, IC cards and/or EAROM cards (which are 
collectively indicated by smart card 142) using known 
standards and techniques. The smart card reader/writer 110 
may be utilized for obtaining additional recordable param- 
eters such as the identity of the photographer, which can be 
subsequently utilized for verifying the authenticity of the 
images. 

[0037] A^Beisonal :: SreT'Netw^ 

qpe^t^^-^Gjane^ 

Q?|tjg2,js^^ 

recor^a^ 

di§cIo3e^D^f^^ 

Networks-fe^iJieax=Fie^^ 

Safl&eiaWGalif^USA^As^ 
refererK^^um^onfilitiolrm^ 
sor^and : systems^vtanhe=PAN-wte 
devices hjyjng^^'ransceiver^ 

viduSlsliS^ Such concept may be 

employed in the present invention whereby the identity of 
the photographer is transferred to the camera 100 upon 
human contact (e.g., holding the camera) when the image is 
taken rather than transferring such information to the camera 
100 through a magnetic or smartcard or wireless communi- 
cation. 

[0038] ^e^0ieija-dOO-p^ 

RF,j^w&llcas-traBSB3itti 

1 11 usjjn| y ynyentiQn 

d evice may also includ e_aji ~inj^ 

120, for processing incoming optical information and for 
transmitting optical signals using conventional constructions 
and known techniques. In particular, the IR processor 118 
and the RF processor 112 may be utilized for communicat- 
ing with objects in a scene being photographed (assuming 
the objects being photographed are transmitting either RF or 
IR signals) so as to obtain and record information such as the 
name and identity of the object. In addition, the IR and RF 
processors can be used for transmitting (i.e., downloading) 
digital images from the camera 100 to a computer having IR 
and/or RF receivers. 

[0039] The^paiameters^m-^dd 

f discussea : below)-are^^ 

pjoyjde^toHfie^ 

aTelrerordejUm^ 

/prefeTaBr^recordj^ 

caimectedJoJhe j; cara 
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[0040] In addition, the user-specified parameters may be 
chosen (or precluded) via voice activated commands (e.g., 
by stating into the microphone 138" I want to have shutter 
speed recorded with the image"). Such voice commands are 
then received by the CPU 102 via the A/D converter 136 and 
processed in the speech processor module 104. It is to be 
appreciated that the digital images may also be annotated 
through voice data. It is to be understood that any conven- 
tional command and control engine for speech recognition 
may be employed in the present invention such as the 
commercially available large vocabulary IBM VIAVOICE 
GOLD system to perform the speech recognition functions 
in accordance with the present invention. 

[0041] Referring to FIG. 1, the camera 100 preferably 
includes a serial port interface 140 and a parallel port 
interface 144 (utilizing known computer interface standards 
such as RS232 and USB), operatively coupled to the CPU 
102, to provide means for establishing a communication link 
between the camera 100 and a server/computer (not shown) 
so as to, e.g., download digital images stored in memory 108 
to a database within the server/computer. In addition, a 
modem 146 (of any conventional type) and an associated 
conventional telephone line interface (not shown) is 
included for establishing communication between the cam- 
era 100 and a remote server/computer (not shown). 

[0042] The camera 100 further includes a watermarker 
processor 134, operatively coupled to the central processing 
unit, for watermarking the user-specified parameters within 
each image in accordance with the present invention. The 
user of the camera 100 can specify (via the user interface 
display 126) which of the plurality of parameters are to be 
watermarked into the digital images (under the control of an 
applicable software program). The user interface/display 
126 also is also utilized for displaying which of the param- 
eters are being watermarked at any given time. The image 
processor provides the captured image (or "source image") 
along with the specified recorded parameters to be water- 
marked to the watermarker processor 134. Alternatively, the 
source image may first be compressed (using conventional 
compression methods such as the preferred JPEG standard) 
and the parameters watermarked into the compressed digital 
image. It is to be appreciated that any conventional water- 
marking method may be employed in the present invention. 
The preferred watermarking system and method (for both 
digital images and compressed digital images), however, is 
disclosed in application Serial No. 08/780,484, entitled: "An 
Invisible Image Watermark for Image Verification", which is 
commonly assigned to the present assignee and which is 
fully incorporated herein by reference. As discussed in detail 
below, the preferred watermarking method allows the 
recorded parameters to be watermarked into every captured 



image, which parameters may then be later used for verify- 
ing the authenticity of pictures, as well as for indexing and 
searching photo albums. Since the parameters are water- 
marked into the image, it is difficult to modify the image 
without affecting the watermarked data. An alternative pre- 
ferred embodiment for the watermarking process is dis- 
closed in U.S. Pat. No. 5,530,759 to Braudaway et al., 
entitled: "COLOR CORRECT DIGITAL WATERMARK- 
ING OF IMAGES". 

[0043] The following table illustrates the parameters that 
can be recorded and watermarked with each image. It is to 
be understood, however, that the table is not illustrative of 
every parameter which may be recorded and watermarked 
and that one of ordinary skill in the art could envision 
additional parameters that may be recorded and utilized in 
accordance with the teachings of the present invention 
herein. 



Length 



Field 


Description string 


(Bytes) 


Location 


Latitude (e.g. N 41 45.72 1), Longitude 


72 




(e.g. W 76 35.420) 






Altitude (e.g., 1.500E + 2 m) 




Principal axis 


Azimuth (e.g., 030,12 degrees), 


12 


orientation 


Altitude (+20.19 degrees) 




Camera Velocity 


in m/Bec or ft/sec (e.g., 1.1 00 E + 2 


8 


m/sec) 




Image mode 


Portrait (?) or Landscape (L) 


2 


Image quality 


high, medium, low or other 


1 


Compression scheme 


e.g., JPEG 


1 


Date 


day/month/year (e.g., 12/12/1997) 


10 


UTC Time 


hr:min:sec (e.g., 10:20:31) 


8 


Local Tune 


hr:min:sec (e.g., 10:20:31) 


8 


Exposure Duration 


hr:min:sec (e.g., 1.000E +• 1 msec) 


8 


Aperture 


f-stop (e.g., fll) 


2 


Light meter reading 


lux (e.g., 1.001 E + 0 lux) 


8 


Flash Status 


ON/OFF 


1 


Lens focal length 


in mm (e.g., 5.000E + 2 mm) 


8 


Auto focus distance 


in m (e.g., 1.510E + 2 m) 


8 


Frame no 


frame counter value since last reset 


4 


Voice annotation 


ascii text 


20 


Photographer 


ascii text 


30 






211 



[0044] As shown in the table, the memory required for 
storing the recorded parameters is a few hundred bytes, 
which is significantly less than the memory needed to store 
a compressed image. For instance, a 1152x864 digital image 
captured by the commercially available Kodak DC 210 
camera and stored in JPEG format requires approximately 
320 KB. Indeed, the few hundreds of bytes used for the 
camera parameters is a small fraction of the total storage 
required even for a highly compressed image. Consequently, 
the parameter data can easily be recorded with the image 
with no significant change in the storage requirements of the 
image. In addition, this data can typically be hidden into the 
image with no loss of image quality. 

[0045] The preferred watermarking process in accordance 
with the present invention (as disclosed in the above U.S. 
application Ser. No. 08/780,484) will now be described in 
detail with reference to FIG. 2, which is a block diagram of 
a preferred architecture for the watermarking processor 
shown in FIG. 1. Specifically, FIG. 2 is a functional block 
diagram of the watermarker processor 134 of FIG. 1 for 
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providing image stamping and verification in accordance 
with an embodiment of the present invention. The water- 
marking processor 134 is operatively coupled to the image/ 
parameter processor 106 for receiving a source image 200 
and the stamping information 202 (i.e., parameters to be 
watermarked), which are provided by the image/parameter 
processor 106. The source image 200 and the stamping 
information 202 are sent to an image stamping module 204, 
wherein they are combined to produce a stamped source 
image 206. During the image stamping process, the stamp- 
ing information is embedded into the source image, S(I,J), to 
produce a stamped source image SS (I and J integers 
locating a particular value in a matrix and representing, e.g., 
Ith column and Jth row). The stamped source image 206 
should appear perceptually to be nearly identical to the 
source image 200, although it has the stamping information 
202 embedded in it. In other words, the stamping informa- 
tion is hidden invisibly and directed into the original image 
values. The functional components of the image stamping 
module 204 and the corresponding stamping method of the 
incorporated U.S application Ser, No. 08/780,484 will be 
discussed in further detail below with reference to FIGS. 5 
and 6, respectively. 

[0046] A verification key 208 corresponding the param- 
eters used for watermarking is also produced. As described 
in above incorporated U.S application Ser. No. 08/780,484, 
in one preferred embodiment, the verification key can be a 
set of binary look-up -tables (LUT's), or can be a number and 
a known function generator of the number which can be used 
to generate the required set of binary LUTs. To produce the 
key, a random number generator is used to generate ran- 
domly a sequence of numbers, each number can then be 
mapped through a known function to a bit value, and each 
bit value becomes one entry to the binary LUT's that serve 
as the verification key 208. 

[0047] The stamped images are stored in an image archive 
210. The image archive 210 may be located in the camera 
100 (FIG. 1). Alternatively, the image archive can be located 
in a remote server (not shown), whereby the stamped image 
is transmitted (e.g., via wireless communication or modem) 
to a desired location. The verification keys are stored in a 
secured storage 212. The secured storage 212 may also be 
located in the camera 100 or in a remote server. 

[0048] It is to be appreciated that image verification pro- 
cessing can also be performed with the watermarker pro- 
cessor 134. It is to further appreciated that image verification 
processing may also be performed by the remote server in 
which the image archive 210 and the key archive 212 are 
located. The watermarker processor 134 includes a stamping 
information extractor for receiving a stamped image from 
the archive 210 and the corresponding verification key of the 
stamped image from the secured storage of the keys 212. 
The stamped source image and corresponding verification 
key are processed by the stamping information extractor 
module 214 wherein the stamping information embedded on 
the retrieved stamped image is extracted. The extracted 
stamping information 216 and the original stamping infor- 
mation 202 (the recorded camera parameter corresponds to 
the source image) are provided to a comparator module 218, 
which compares the extracted stamping information with the 
originally recorded parameters. The result of the verification 
is then provided to a confirmation/warning module 220 to 
either confirm the authenticity of the image (assuming there 



is a match between the extracted data and the recorded data) 
or to warn the user of potential fraud and to take appropriate 
measures (assuming that there is no match between the 
extracted data and the recorded data). Assuming the verifi- 
cation process is performed in the server system at a remote 
location, such actions may include alerting the system 
administration of potential abuse as well as restricting the 
access of images whose content integrity is under investi- 
gation. 

[0049] Referring now to FIG. 3, a flow diagram of a 
method for image verification in accordance with the present 
invention is illustrated. By way of example, assume that a 
person working as a claims adjuster for a fire insurance 
agency is given the task of taking photographs of a residen- 
tial home which has been partially destroyed by fire. The 
claims adjuster (i.e., photographer) will be provided with 
pertinent information (i.e., parameters) such as the location 
(e.g., city and address or latitude and longitude) of the 
residence which must be photographed (step 300). Upon 
arriving at the desired location, the claims adjuster will enter 
the desired parameters which are to be recorded and/or 
watermarked into the camera 100 via the input/display 126 
(step 302). The photographer will then take pictures of the 
residence and the specified parameters (e.g., location, date 
and time) will be recorded with each captured image (step 
306). In addition, the parameters that are specified to be 
watermarked will be stamped into each captured image and 
the corresponding verification key (which is based on the 
watermarked parameters) will be generated (step 306). It is 
to be understood that, alternatively, the desired parameters 
may be watermarked into the captured image without being 
recorded within the header file of the captured image. In 
particular, the parameters may be separately recorded in a 
file which can be, e.g., stored in the memory 108 and 
subsequently downloaded to a central server remotely 
located at an office of the insurance agency via the modem 
146 or by RF transmission via the RF processor 112. In 
addition, the desired parameters (such as time date and 
location of the captured image) may be manually recorded 
and later used to verify the authenticity of the corresponding 
image. 

[0050] Once the desired parameters are watermarked, the 
stamped image and corresponding verification key will then 
be stored within the camera (step 308). Alternatively, the 
stamped image and corresponding verification key can be 
directly transmitted (e.g., via IR, RF or modem) to the 
central server which is located in an office of the insurance 
agency (step 308a). 

[0051] When the authenticity of a given image must be 
verified, the associated stamped image will be downloaded 
from memory (step 310) (e.g., from the camera 100 or the 
central server in which such image is stored). As indicated 
above, the verification process may be performed via the 
watermarker processor 134 in the camera 100 or at the 
remote location (e.g., insurance agency) by downloading the 
image from the server. The verification key which corre- 
sponds to the stamped image will also be obtained to 
perform the verification process (step 312). The water- 
marked parameters (stamping information) will then be 
extracted from the stamped image using the verification key 
(in accordance with the preferred extraction method dis- 
cussed in detail below) (step 314). The extracted stamping 
information will then be compared with the corresponding 
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parameters that were recorded (e.g. either in the correspond- 
ing image header, in a separate corresponding file, or manu- 
ally) when the image was captured (step 316). For example, 
if the location (latitude and longitude) were recorded and 
watermarked with the image, the extracted location data will 
be compared with the recorded location data. If the recorded 
parameters match the extracted watermarked parameters 
(affirmative result in step 318), the authenticity of the image 
is verified. In other words, since the recorded parameters and 
the watermarked parameters coincide, the insurance com- 
pany can be ensured that the images are accurate and have 
not been fraudulently modified or tampered with. In addi- 
tion, the insurance agency can confirm that the images were 
in fact taken at the location (residence) that the claims 
adjuster indicated in his or her report. If, on the other hand, 
the recorded parameters and the watermarked parameters do 
not match, the insurance company will determine that either 
the image has been modified or that the images were not 
taken at the corrected location, and, thus, will be able to take 
the necessary action and investigate potential fraud (step 
322). 

[0052] Preferred Image Stamping and Verification Meth- 
ods 

[0053] Referring to FIG. 5, a block diagram is shown of 
the image stamping module 204 of FIG. 2 in accordance 
with a preferred embodiment of the present invention. The 
process of embedding the stamping information 510 into a 
source image 511, S(I J), to produce a stamped source image 
513, SS(I,J) (the I and J integers locating a particular value 
in a matrix and representing for example, Ith column and Jth 
row), and without incurring visible artifacts, consists of 
several major components, illustrated in blocks 502, 503, 
505, 506 and 509. 

[0054] The functional block 502 shows the generation of 
the verification key and a set of functions to extract the 
watermark value from a pixel such that the extraction 
process is secured without the proper key. 

[0055] As discussed in the above incorporated U.S. appli- 
cation Ser. No. 08/780/484, the verification key can be a set 
of binary look-up-tables (LUTs), or can be a number and a 
known function generator of the number which can be used 
to generate the required set of binary LUTs. To produce the 
key, a random number generator 501 is used to generate 
randomly a sequence of numbers, each number can then be 
mapped through a known function to a bit value, and each 
bit value becomes one entry to the binary LUTs that serve 
as the verification key 512. Three binary LUTs are needed 
for a color source image, and one binary LUT for a mono- 
chrome source image. In another approach, the random 
number generator 501 can generate a seed number to serve 
as the key 512, and this number can be fed into a known 
cyclic function generator to be used to reproduce the 
required binary LUTs. 

[0056] The binary LUTs serve as the binary mapping 
functions in the computation of watermark values of the 
source image pixel 511, namely S(I,J), as shown in block 
503. The computation, or the extraction, of the watermark 
values is identical in the functionality to that of 404 in FIG. 
4 (which is discussed detail below). The only difference is 
that the input is the source image pixel values S(IJ) instead 
of the stamped pixel values. For a color source image pixel 
S(IJ), the three color components values of red, green and 



blue are denoted by SR(I,J), SG(U) and SBflJ) respec- 
tively, and the set of three mapping functions provided by 
the three LUTs are LUT R (*), LUT G (*) and LUT B (*) 
respectively. For a monochrome image, the pixel intensity 
value is denoted by S(I,J) and the mapping function pro- 
vided by the binary LUT be LUT(*). The watermark extrac- 
tion function WX(*) is a function of the mapping functions. 
For each pixel (I J), the extracted watermark value EW(I,J) 
is computed as follows: let © be the XOR operator, 

[0057] EW(I,J)oLUT R (S R (U)) © LUT G (S C (U)) © 
LUT B (S B (U)) for a color source image and EW(I, 
J)=LUT(S(I J)) for a monochrome image. 
[0058] The computed watermark value of a source image 
pixel is then compared with the desired value of the stamp- 
ing information W(I,J), in the comparison process as shown 
in block 504 to see if the values match or not. 
[0059] The gateway 507 controls the implementation of 
the iteration process of the pixel modification, which has two 
subparts. In the first subpart, in step 505, each source image 
pixel value is altered such that the computed watermark 
value is forced to match the desired value in the correspond- 
ing pixel in the watermark image, if no match of the 
watermark values is found at the first testing. For the pixel 
alteration, the errors introduced by the modification cannot 
produce visible artifacts in the stamped image so the errors 
are introduced at predetermined slowly increasing levels in 
order to alter the image pixel intensity values gradually. 
Therefore, the process of pixel modification may take sev- 
eral iterations. The watermark value of the altered pixel is 
recomputed in block 508 with each new error adjustment 
iteration to check if the re-computed value matches the 
desired value in block 504. In the second subpart, once the 
computed watermark value matches the desired watermark 
value, then the iteration stops and the errors introduced in 
the pixel-value alteration step are then diffused in block 506 
to neighboring pixels in such a way to maintain a constant 
average color intensity values in the neighboring pixels. 
[0060] For a color image pixel, the three color values of 
the pixel are altered. The pixel values have to be modified in 
a way such that the distortions are minimal. Any color 
intensity value can be modified at a given iteration. The level 
of adjustment starts from +1 or -1 and gradually increases 
in magnitude in subsequent iterations. Book-keeping of the 
current level of adjustments in each color component is used 
to ensure that the magnitude of level change increases 
gradually. The maximum level of adjustment is controlled to 
ensure the alteration does not lead to significant difference in 
visual quality of the image. 

[0061] The selection of color to be altered at a given 
iteration can be achieved by using predefined tables or by 
incorporating random number generators in the selection 
process. The advantage of using random number generators 
is that the modifications are spread out to all the three colors 
instead of concentrating at a particular color for a majority 
of the pixels. The effect is especially prominent in the 
encoding of synthetic images in which a large area may be 
of uniform intensity values. A systematic scheme in the 
selection of pixels to modify can lead to the concentration of 
alteration in one particular color (+or -) of level adjustment 
is also made random at each pixel to smooth out the errors 
produced locally. 

[0062] For a monochrome image, the pixel alternation is a 
straight forward adaptation of the method used in the 
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alternation of color pixels: the gradual adjustments of the 
pixel values are confined to one intensity component instead 
of the three color components. 

[0063] The errors produced by the pixel value alteration 
described above are then diffused as shown in block 506, so 
that the average image intensity values are preserved; this 
produces the proper average color as the errors are diffused 
locally over an image to smooth out the alterations. 

[0064] Error diffusion is commonly used for smoothing 
the transitions of colors around neighboring pixels in the 
conversion of true colors to limited color palettes. The 
process produces good quality color images by adding 
natural texture and color transitions in place of sudden 
changes. Error diffusion is employed for similar reasons in 
the encoding unit such that the errors produced by altering 
the pixel values (which is equivalent to the quantization 
errors in the color conversion process) will spread to neigh- 
boring pixels. This method enables retention of the proper 
average color and eliminates unwanted local artifacts. Spe- 
cifically, as discussed in detail in the above incorporated 
U.S. application Sen No. 08/780,484, the process of embed- 
ding stamping information 510 into the source image pixel 
values introduces errors and alters the pixel values. The 
errors introduced, however, do not cause visual quality 
degradation to the image as the errors are spread out locally 
by utilizing known error diffusion techniques. This process 
is repeated until every pixel in the source image has been 
stamped. The stamped source image 513 should appear 
perceptually to be nearly identical to the source image 511, 
although it has the stamping information 510 embedded in 
it. In other words, the stamping information is hidden 
invisibly and directed into the original image values. 

[0065] When the stamping process is completed, a 
stamped image 513 is produced as the output and incorpo- 
rates the stamping information in its pixel values. In addition 
to the output stamped image 513, a verification key 512 is 
produced in the process for the subsequent image verifica- 
tion process. 

[0066] Referring now to FIG. 6, a flow diagram of a 
preferred image stamping process in accordance with the 
present invention is shown. The image stamping process 
begins at step 601 by computing the verification key (step 
602), computing the watermark extraction function WX(*) 
(step 603), and initializing the indices, I and J, for the pixel 
to be processed (step 604). The pixel at location (I J) is then 
processed (step 605) (which is an iterative processing) to 
modify pixel value at location (U) by introducing errors, 
and to diffuse the errors to neighboring pixels (in accordance 
with the diffusion method discussed in detail in the incor- 
porated U.S. application Ser. No. 08/780,484). The pixel 
indices (I,J) are incremented to the indices of the next pixel 
to be processed (step 608), and a test is performed to 
determine whether the entire source image has been pro- 
cessed (step 609). If the entire source image has been 
processed (affirmative result in step 609) the image stamping 
process is complete, otherwise processing returns to step 
605. 

[0067] Referring now to FIG. 4a, a flow diagram of the 
preferred embodiment of extraction process as disclosed in 
the above incorporated U.S. application Ser. No. 08/780,484 
in accordance with a preferred embodiment of the present 
invention is shown. The stamping information EW(I,J) is to 



be extracted from the stamped source image, SS(I,J). The 
processing begins (step 401) by comparing the watermark 
extraction function, WX(*) based on the corresponding 
verification key (step 402), and initializing the pixel indices, 
I and J, to the indices of the first pixel to be processed (step 
403). 

[0068] The watermark extraction function WX(*) is then 
applied to the pixel SS(I,J) to produce the extracted stamp- 
ing information at the pixel EW(I,J) (step 404): 

EWO,J)-wx(ss(y)). 

[0069] The pixel indices are then incremented (step 405) 
to the indices of the next pixel to be processed, and the pixel 
indices are tested (step 406). If all pixels in the stamped- 
source image have been processed, then the watermark 
extraction process is complete (step 407). If, on the other 
hand, all pixels in the stamped source image have not been 
processed, then the watermark extraction function is applied 
to the next pixel (return to step 404), the pixel indices are 
again updated (step 405), and the indices are again tested 
(step 406) to determine whether all pixels in the stamped 
source image have been processed. In short, the watermark 
extraction process is repeated until every pixel in the 
stamped-source image has been processed. 

[0070] For a stamped color image SS(IJ), every pixel (U) 
in the image contains three color-component values showing 
the red, green and blue color intensities respectively, namely 
SS^U), SS G (M) and SS B (I,J). For a monochrome stamped 
image, every pixel (I,J) desirably contains only one color 
intensity value, namely SS(U). The watermark extraction 
function WX(*) is a function computed based on the veri- 
fication key. More formally, 

EWCI^-WXCSSrCI^^SoCU^SSbCIJ)) 

[0071] where WX(*) can be a mapping function which can 
take an input value (that is, the pixel intensity value) into a 
binary output value, and the mapping function is given by 
the verification key. 

[0072] A different mapping function may be applied for 
each color intensity value of a pixel, and each mapping 
function for a single color component is called a color- 
component mapping function. For a color image, a set of 
three color-component mapping functions are needed, 
namely F R (*), F Q (*) and F B (*); and for monochrome image, 
one is needed, namely F(*). In other words, F(*), F R (*), 
F Q (*) and F B (*) each can map an input value (the pixel 
intensity value) into a binary output value. 

[0073] These different mapping functions are imple- 
mented in the form of binary look-up-tables (LUTs) in 
which the pixel value serves as the index to a table entry, and 
the table entry then gives a one-bit value ( ( 0 5 or '1') output. 
In this case the verification key is related to a set of binary 
look-up-tables (LUTs) (three tables for color image and one 
table for monochrome image), and for the exemplary 
embodiment may be a number (or a "seed") which can be 
fed into a known cyclic function generator to generate the set 
of binary LUT's. 

[0074] Each binary LUT of the present exemplary 
embodiment is generated as follows. First, given an index, 
the table entry is either a *1' or an '0', which is determined 
in a random fashion. For example, a pseudo random number 
generator can be used to generate the table entries as 
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arbitrary numbers having a random number distribution. As 
is known in the art, these pseudo random number generators 
employ a cyclic functions that receives an input number, 
called a "seed," and then recursively generate a random 
output value. In one embodiment, the function subroutines 
srand( ) and rand( ) of the standard library of the C 
programming language are used. For each random output 
value, the table value is set as '0* if the random output value 
is even, and '1* if the random output value is odd. However, 
as would be apparent to one skilled in the art, the random 
table entries could be generated in any number of ways; for 
example, by using values generated by linear feedback shift 
registers, values from random number tables, or any other 
orthogonal function sequences. 

[0075] The watermark extraction step 404 is illustrated in 
FIG. 46. Given a stamped image pixel SS(IJ) 1001, the 
intensity value of each color component, SS R (I,J), SS Q (1,J) 
and SS B (I,J), respectively, serves as the index to the corre- 
sponding binary look-up-table (LUT), namely LUT R , LUT G 
and LUT B (as shown in 1002) for Red, Green and Blue 
color, respectively- The table entry of each index is read as 
the output. For each color, a one-bit output ('0' or '!*) is 
obtained from the table, namely VI, V2 and V3. These three 
output bits then undergo the XOR (Exclusive OR Operator) 
operation 1003 to give the final desired watermark bit value 
EW(I,J) 1005 for the (lj)ih pixel. In mathematical terms, let 
the exclusive OR operator be represented by ®, 

[0076] for a color stamped image (and EW(I,J)= 
LUT(SS(I,J)) for a monochrome image). 

[0077] For example, if an image pixel SS* has the color 
intensity values 

S5 R *=134, &S 0 *=255,5V=255; 

[0078] and 

L tOT(134>ai£TOC255)=QilLTO(255)=l; 
[0079] then the extracted watermark value EW* of SS* 
becomes 

£W=0®0©1=1. 

[0080] In the above example the watermark extraction 
function WX(*) is the combination of the XOR function and 
the mapping functions given by the LUT's as shown in 
1003. Many other possible mapping functions and combi- 
nations of mapping functions can be implemented as the 
watermark extraction function. 

[0081] The comparison of extracted watermark values 
EW(I,J) and the watermark image values W(I J) as shown in 
the block 218 of FIG. 2 can be accomplished automatically 
as follows: for each pixel (U), the absolute value difference 
between EW(U) and W(U) is recorded. For binary water- 
mark values this can either be '0' if the two values match, or 
'1' if the two values do not match. The absolute value 
differences for all pixels are added up and if the sum exceeds 
a predefined threshold, then the stamped image is declared 
as having been altered. Other automatic comparison algo- 
rithms can also be implemented. 

[0082] Although the illustrative embodiments of the 
present invention have been described herein with reference 
to the accompanying drawings, it is to be understood that the 
invention is not limited to those precise embodiments, and 



that various other changes and modifications may be 
affected therein by one skilled in the art without departing 
from the scope or spirit of the invention. All such changes 
and modifications are intended to be included within the 
scope of the invention as defined by the appended claims. 

What is claimed is: 

1. An image capturing system for automatically recording 
and watermarking a plurality of parameters in a captured 
image, comprising: 

a central processing unit for controlling a plurality of 
functions and operations of said system; 

image capture means, operative ly connected to said cen- 
tral processing unit, for generating a digital image of an 
observed image frame and for generating a plurality of 
image data associated with said generation of said 
image; 

wireless communication means, operatively connected to 
said central processing unit, for receiving data from 
objects in said observed image frame when said image 
is generated; 

geographic location determining means, operatively con- 
nected to said central processing unit, for determining 
geographic coordinates of said system when said digital 
image is generated; 

means for determining a time and a date when said image 
is generated; 

information receiving means, operatively coupled to said 
central processing unit, for receiving data associated 
with a user of said system when said digital image is 
generated; 

image processing means for receiving said plurality of 
parameters and recording said plurality of parameters 
with said generated digital image, said plurality of 
parameters including said plurality of image data, said 
object data, said time data, said date data, said location 
data, and said user data; and 

means, operatively coupled to said image processing 
means, for watermarking said plurality of parameters 
into said image. 

2. The system of claim 1, further comprising means for 
specifying which of the plurality of parameters should be 
recorded with said image and for specifying which of said 
plurality of parameters should be watermarked in said 
image. 

3. The system of claim 2, further comprising means for 
determining which of the plurality of parameters are speci- 
fied to be recorded with said image and for determining 
which of the plurality of parameters are specified to be 
watermarked in said image. 

4. The system of claim 1, further comprising means for 
extracting said watermarked parameters from said water- 
marked image. 

5. The system of claim 4, further comprising means for 
comparing said extracted parameters with corresponding 
recorded parameters of said image to authenticate said 
image. 

6. The system of claim 1, further comprising means for 
preventing said watermarking of said images if an image 
quality of said image is altered above a threshold. 
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7. The system of claim 1, further comprising image 
compression means, operatively coupled to said image pro- 
cessing means, for compressing said image. 

8. The system of claim 7, wherein said plurality of 
parameters are watermarked in one of said compressed 
image and said image. 

9. The system of claim 1, further comprising orientation 
determining means, operatively coupled to said central pro- 
cessing unit, for determining orientation data of said system 
when said digital image is generated; said orientation data 
being one of said plurality of parameters. 

10. The system of claim 4, further comprising 

means for receiving one of verbal data and verbal com- 
mands; and 

means for processing said one of received verbal data and 
received verbal command, said processed verbal com- 
mands being used to control one of a plurality of 
function and operations of said system, said processed 
speech data being one of said plurality of parameters 
for annotating said digital image. 

11. The system of claim 1, further comprising means for 
determining said location of said system when said geo- 
graphic location determining means is inoperable, 

12. The system of claim 1, wherein said plurality of image 
data associated with said generation of said image includes 
one of an image mode, image quality, exposure duration, 
aperture length, light meter reading, flash status, lens focal 
length, auto focus distance, frame number, and a combina- 
tion thereof. 

13. In an image capturing system, a method for authen- 
ticating a captured image, comprising the steps of: 

measuring a plurality of parameters associated with said 
captured image; 

watermarking said plurality of parameters into said cap- 
tured image to generate a watermarked image, and 
generating a verification key associated with said 
watermarked parameters; 

extracting said plurality of parameters from said water- 
marked image with said associated verification key; 
and 

comparing said extracted plurality of parameters from 
said watermarked image with said measured plurality 
of parameters associated with said captured image, 
whereby said captured image is authenticated if said 
extracted parameters match with said measured param- 
eters. 

14. The method of claim 14, further comprising the step 
of recording said measured plurality of parameters associ- 
ated with each captured image, said extracted parameters 
being compared with said recorded parameters to authenti- 
cate said captured image. 



15. The method of claim 14, further comprising the step 
of specifying which of said measured plurality of parameters 
is to be watermarked into a corresponding captured image. 

16. The method of claim 14, further including the step of 
transmitting said watermarked image and said associated 
verification key to a remote system, and said extracting step 
and said comparing step are performed in said remote 
system. 

17. The method of claim 14, further comprising the step 
of compressing said captured image prior to said watermark- 
ing step, whereby said measured parameters are water- 
marked into said compressed image. 

18. A method for verifying the authenticity of a captured 
image, said captured image being generated by an image 
capturing system having means for measuring a plurality of 
parameters associated with said captured image and means 
for watermarking said plurality of parameters within said 
captured image, said method comprising the steps of: 

specifying at least one of said plurality of parameters to be 
measured and watermarked by said image capturing 
system; 

capturing an image of a desired object with said image 
capturing system; 

watermarking said captured image of said object with said 
specified parameters; 

generating a corresponding verification key based on said 
watermarked parameters; 

storing said watermarked image and said corresponding 
verification key; 

retrieving said watermarked image and said correspond- 
ing verification key; 

extracting from said watermarked image said water- 
marked parameters using said verification key; 

comparing said extracted parameters with said specified 
parameters to determine if said extracted parameters 
match said specified parameters. 

19. The method of claim 19, further comprising the step 
of recording said specified parameters, wherein said 
recorded parameters are compared with said extracted 
parameters. 

20. The method of claim 19, wherein said step of record- 
ing said specified parameters includes one of electronically 
recording said specified parameters with said captured 
image and manually recording said specified parameters 
associated with said captured image. 
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